tickera records
7 published records for vendor tickera.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 42.9%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-35729No exploit | WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerabilitytickera · tickera · CWE-862 | High8.8 | — | 0.3% | Jun 10, 2024 |
29Monitor | CVE-2024-10263No exploit | Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Executiontickera · tickera · CWE-94 | High7.3 | — | 0.5% | Nov 5, 2024 |
24Monitor | CVE-2021-24797No exploit | Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scriptingtickera · tickera · CWE-79 | Medium6.1 | — | 1.1% | Dec 27, 2021 |
24Monitor | CVE-2023-41861No exploit | WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)tickera · restrict · CWE-79 | Medium6.1 | — | 0.4% | Sep 27, 2023 |
21Monitor | CVE-2023-7252No exploit | Tickera < 3.5.2.5 - Ticket leakage through IDORtickera · tickera · CWE-639 | Medium5.3 | — | 0.5% | Apr 22, 2024 |
17Monitor | CVE-2022-4549No exploit | Tickera < 3.5.1.0 - Plugin Data Deletion via CSRFtickera · tickera · CWE-352 | Medium4.3 | — | 0.2% | Jan 16, 2023 |
17Monitor | CVE-2024-5860No exploit | Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletiontickera · tickera · CWE-862 | Medium4.3 | — | 0.2% | Jun 18, 2024 |
- CVE-2024-3572935Monitor
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%tickera · tickeraJun 10, 2024
- CVE-2024-1026329Monitor
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
HighCVSS 7.3No exploitEPSS 0%tickera · tickeraNov 5, 2024
- CVE-2021-2479724Monitor
Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%tickera · tickeraDec 27, 2021
- CVE-2023-4186124Monitor
WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%tickera · restrictSep 27, 2023
- CVE-2023-725221Monitor
Tickera < 3.5.2.5 - Ticket leakage through IDOR
MediumCVSS 5.3No exploitEPSS 0%tickera · tickeraApr 22, 2024
- CVE-2022-454917Monitor
Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
MediumCVSS 4.3No exploitEPSS 0%tickera · tickeraJan 16, 2023
- CVE-2024-586017Monitor
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
MediumCVSS 4.3No exploitEPSS 0%tickera · tickeraJun 18, 2024